» smartprivacycleaner.exe
Overview
Analysis
File Details
Downloads (3)

smartprivacycleaner.exe

Smart Privacy Cleaner

Smart PC Solutions, Inc.

The application smartprivacycleaner.exe, “Protect your privacy by finding and deleting all traces of y” by Smart PC Solutions has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from click.activeris.com and multiple other hosts.

File name:

Publisher:

Activeris (signed by Smart PC Solutions, Inc.)

Product:

Smart Privacy Cleaner

Description:

Protect your privacy by finding and deleting all traces of y

Version:

2.0

MD5:

42079e7169e1d225a63485e22b76cbc6

SHA-1:

c5f4a0516af1e6199a79f188e7e14172e41ff8bf

SHA-256:

1d77228c4d6f0b81874a7d2b26ccdd0ec999bcb31524214e850642793855081a

Scanner detections:

1 / 68

Status:

Potentially unwanted

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

12/25/2024 12:00:42 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.SmartPCSolutions.T

14.6.10.14

File size:

1.2 MB (1,284,344 bytes)

Product version:

2.0

Activeris

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\smartprivacycleaner.exe

Digital Signature

Signed by:

Smart PC Solutions, Inc.

Authority:

VeriSign, Inc.

Valid from:

4/5/2011 1:00:00 AM

Valid to:

5/30/2014 12:59:59 AM

Subject:

CN="Smart PC Solutions, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Smart PC Solutions, Inc.", L=Alexandria, S=Virginia, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

502E76B6ACDCDE4F3336BF9286946063

File PE Metadata

Compilation timestamp:

6/19/1992 11:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:sQiz55rTrMyT/MQZ22nBurJxr6qO20CculW6xCaySxAn90:s9vrTrNTL22BKxrSCE6QDSxAnq

Entry address:

0xA5F8

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55... 
[+]

Entropy:

7.9869

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

39.5 KB (40,448 bytes)

The file smartprivacycleaner.exe has been seen being distributed by the following 3 URLs.

http://click.activeris.com/.../click?upn=8BRQVRpOhx9IqHZemfbYwGzIvx0bfg0rEnw3KZ891zKA62zxXVGxMl0hwuAdng6UqGZFFayWDinpoRAntU7Nxw-3D-3D_DvAPrsoRhoV2D0pRh4yy6JbWLE1EQWayGitJQyX1qYwFNsTo4jvmFgMEP-2B1C2kYsf7qOn9RGKI7Coc6BXYzhi8sSOii41tKmq1kiE9GzLIXRqt0bSPre1iW9XKmKbqIxq6sQ3QNmera8XWK3OJzTTVelr-2BPyCR61XHFL-2FAeihw9k1JoFx5DOKYsmrMmDbh7OV-2FIQPGfZXBKbbE0xK9O5ow-3D-3D

http://click.activeris.com/.../click?upn=8BRQVRpOhx9IqHZemfbYwGzIvx0bfg0rEnw3KZ891zKA62zxXVGxMl0hwuAdng6UqGZFFayWDinpoRAntU7Nxw-3D-3D_ms-2F4tg8aE3OJyUIXVwcFj7bnsCJ88kgOkLysnFN4qJq7LGgHy7PUCjLnVhQ5-2BxIng3J2hmmk-2FcATJnEB-2BftJPoS-2B1Ei5TtoQH-2ByEVngg83OFzg1F-2Fj7fMwNniNzhfSC7-2Fq-2Fy40Bc1vsNbC068IOpnKsppJ5o7FR3u69zoJoY5JLpXPz7kh0ujD10zHAHZYyyYJZAm0zH83bOHtWQFPp5RA-3D-3D

http://download.activeris.com/SmartPrivacyCleaner.exe

Remove smartprivacycleaner.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.